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HFTAII FD ACTION 

Claims 1-20 are pending. 

Information Disclosure Statement 

The information disclosure statement (IDS) submitted on 22 August 2003 is in compliance with 
the provisions of 37 CFR 1.97. Accordingly, the Examiner has considered the IDS as to the merits. 

Claim Reactions - 35 USC S 112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

1. Claims 1-8 and 19-20 are rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant regards as the 
invention. The use of the term 'substantially 5 renders claims 1 and 19 indefinite. 
All other claims are rejected by virtue of their dependency. 



Claim Rejections - 35 USC S 101 

35 U.S.C. I0l reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition 
of matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

2. Claims 9-20 are rejected under 35 U.S.C. 101 because the claimed invention is directed to non- 
statutory subject matter. The Examiner asserts that the current state of the claim language is such that a 
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reasonable interpretation of the claims would not result in any useful, concrete or tangible product. The 
design is simulated as per the claim language, but no tangible result is produced. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis 
for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or 
in public use or on sale in this country, more than one year prior to the date of application for 
patent in the United States. 

3. Claims 1-20 are rejected under 35 U.S.C. 102(b) as being clearly anticipated by Smith et al. 
(US Patent No. 6,353,906), herein referred to as Smith. 



Regarding claim 1: 

Smith is directed to a domain-crossing verifier comprising: 

a. a design scanner, receiving a textual design file specifying functions to be performed by a 
chip being designed, for locating domain-crossing signals generated by a first clock but 
sampled by a second clock, wherein the first clock and the second clock are 
asynchronous (figures 3 and 4; column 3 lines 1-15) 

b. wherein the first clock has a first clock period and the second clock has a second clock 
period that differs from the first clock period (figures 3 and 4) 

c. a delay randomizer that randomly selects as a random delay either a first delay value or a 
second delay value, the first and second delay values substantially differing by the second 
clock period (column 4 lines 25-34). The multiplexer encapsulates the functionality of 
the delay randomizer because it randomly selects the delay path of the input signal. 
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d. a delay applicator, coupled to the delay randomizer, for applying the random delay to a 
first flip-flop, the first flip-flop being clocked by the second clock but receiving one of 
the domain-crossing signals generated by the first clock as an input (column 4 lines 25- 
34); The multiplexer encapsulates the functionality of the delay applicator because after it 
randomly selects the delay path of the input signal, it applies this delay to the output 
signal. 

e. wherein the delay applicator applies a series of random delays generated by the delay 
randomizer to a plurality of the domain-crossing signals located by the design scanner 
(column 4 lines 25-34) 

£ wherein the chip defined by the textual design file can be simulated using the random 
delays that differ by the second clock period to simulate logic hazards caused by domain- 
crossing signals (column 4 lines 34-42) 

Regarding claim 2: 

Smith is directed to the domain- crossing verifier of claim 1 wherein each domain-crossing signal 
passes through a synchronizer that includes the first flip-flop clocked by the second clock and generating 
a middle signal, and a second flip-flop that receives the middle signal and is clocked by the second clock 
to generate a re-synchronized signal that can be sampled by logic in a second domain clocked by the 
second clock (figures 2 and 5; column 5 lines 44-67) and wherein the synchronizers are added to the 
textual de-sign file by the design scanner or are already part of the textual design file (column 4 lines 34- 
42) 



Regarding claims 3 and 4: 
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Smith is directed to the domain-crossing verifier of claim 2 further comprising a cycle simulator, 
performing the functions defined by the textual design file on input stimuli, the cycle simulator delaying 
sampling of the domain-crossing signals by the second clock by the random delays generated by the delay 
randomizer wherein the chip defined by the textual design file is simulated by the cycle simulator using 
the random de-lays that differ by the second clock period to simulate logic hazards caused by domain- 
crossing signals (column 3 lines 56-65; column 4 lines 25-34, 44-63; column 5 lines 44-67). 

Regarding claim 5: 

Smith is directed to using a compiler to check for proper syntax and then generating a netlist 
(column 1 lines 13-38). Smith discloses simulating the HDL design using Cadence, which first compiles 
the HDL to check for errors and then generates a final netlist. 

Regarding claim 6: 

Smith is directed to the domain-crossing verifier (column 3 lines 56-65) of claim 1 wherein the 
first delay value is zero and the second delay value is the second clock period, or wherein the first delay 
value is an arbitrary delay value and the second delay value is the arbitrary delay value added to the 
second clock period (column 5 lines 56-67; column 6 lines 1-5). 

Regarding claim 7: 

Smith is directed to the domain-crossing verifier of claim 1 wherein the delay randomizer 
multiplies a random binary number (column 4 lines 25-34) by a period of the second clock to generate 
the random delay (column 4 lines 59-67). The original signal is delayed (randomly) for a period of time 
at least equal to one clock period relative to the period of clock B (the second clock). 
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Regarding claim 8: 

Smith is directed to the domain- crossing verifier of claim 1 wherein the delay randomizer 
receives a seed value that specifies a starting point in a random-number sequence for generating the 
random delays (column 4 lines 33-35). 



Regarding claim 9: 

Smith is directed to a method for simulating domain-crossing signals that cross from a first clock 
domain to a second clock domain comprising: 

a. identifying a domain-crossing signal generated by a first clock in the first clock domain, 
but sampled by a second clock in the second clock domain (column 5 lines 42) 

b. inserting an added delay to sampling of the domain-crossing signal by the second clock, 
wherein the added delay is selected from a first delay (figure 5 delay 106) and a second 
delay (figure 5 delay 1 10), wherein the second delay is a period of the second clock 
greater than the first delay (column 5 lines 16-20) and wherein the steps of identifying a 
domain-crossing signal and inserting the added delay are repeated for other domain- 
crossing signals (figure 6; column 6 lines 11-13), wherein some domain-crossing signals 
have the second delay selected as the added delay while other domain-crossing signals 
have the first delay selected as the added delay (column 5 lines 56-67; column 6 lines 1- 

5) 

c. simulating a design containing the domain-crossing signals having the added delays to 
sampling by the second clock whereby the design is simulated with added delays on 
domain-crossing signals wherein the added delays differ by the period of the second 
clock (column 2 lines 55-67) 
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Regarding claim 10: 

Smith is directed to the method of claim 9 wherein simulating the design comprises simulating 
from a design- language file before logic gates are synthesized, whereby domain crossing signals are 
verified before gate-level syntheses (column 6 lines 7-15). Smith discloses the simulation of the design 
before gate-level implementation and also discloses implementing the method using a gate-level 
implementation. 

Regarding claim 11: 

Smith is directed to the method of claim 9, wherein simulating the design comprises simulating 
from a design language file to verify the domain-crossing signals before layout and wiring (column 2 
lines 55-67), The prior art discloses simulating only the circuit model contained in the HDL design, and 
does not consider the layout and wiring. 

Regarding claim 12: 

Smith is directed to the method of claim 9, wherein the steps of identifying the domain-crossing 
signals and inserting the added delay are repeated for all domain-crossing signals (column 2 lines 55-67; 
column 3 lines 1-15). The behavioral synchronization is provided for each synchronization element in the 
model. 

Regarding claims 13 and 14: 

Smith is directed to the method of claim 12 wherein inserting an added delay comprises randomly 
selecting the first delay or the second delay as added delay whereby added delays are selected randomly 
(column 4 lines 25-28). 
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Regarding claim 15: 

Smith is directed to the method of claim 12 wherein the delay randomizer multiplies a random 
binary number (column 4 lines 25-34) by a period of the second clock to generate the random delay 
(column 4 lines 59-67). The original signal is delayed (randomly) for a period of time at least equal to 
one clock period relative to the period of clock B (the second clock). 

Regarding claim 16: 

Smith is directed to the method of claim 12 further comprising: 

a. inserting a synchronizer onto the domain-crossing signal, wherein the synchronizer 
comprises a first flip-flop and a second flip-flop in series (figures 2 and 5; column 2 
lines 42-67) 

b. wherein inserting an added delay comprises adding the added delay to an output of the 
first flip-flop before an input to the second flip-flop, whereby synchronizer delays are 
randomized (column 4 lines 25-34). 

Regarding claim 17: 

Smith is directed to the method of claim 12 wherein the first clock is asynchronous to the second 
clock (figures 3 and 4). 

Regarding claim 18: 

Smith is directed to the method of claim 12 further comprising: 

a. identifying a multi-cycle signal generated by the second clock in the second clock 

domain (column 5 lines 5-10), wherein the multi-cycle signal is allowed more than one 
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period of the second clock to propagate before being sampled by the second clock 
(figures 3 and 4; column 3 lines 16-25) ; 

b. inserting an added delay to sampling of the multi-cycle signal by the second clock 
(column 5 lines 61-67), wherein the added delay is selected from the first delay and the 
second delay, wherein the second delay is a period of the second clock greater than the 
first delay (column 6 lines 1-5). The multiplexer randomly selects the delay and then 
adds it into the system. 

c. wherein simulating the design includes simulating the multi-cycle signals having the 
added delays to sampling by the second clock whereby the design is simulated with 
added delays on multi-cycle signals wherein the added delays differ by the period of the 
second clock (column 3 lines 1-25; column 5 lines 61-67; column 6 lines 1-5). 



Regarding claim 19: 

Smith is directed to a domain-crossing signal verifier comprising: 

a. identifying means for identifying a domain-crossing signal generated by a first clock in a 
first clock domain, but sampled by a second clock in a second clock domain (figures 2- 
5); wherein the domain-crossing signal is generated by the first clock passes through a 
first flip-flop and a second flip-flop in a synchronizer, the first and second flip-flops 
clocked by the second clock (column 3 lines 1-15) 

b. delay randomizer means for generating a randomized delay for the first flip-flop in the 
synchronizer (column 4 lines 25-42), wherein the randomized delay is randomly 
selected as either a first delay (figure 5 delay 106) or a second delay (figure 5 delay 
110) wherein the second delay is substantially the first delay added to a period of the 
second clock (column 5 lines 65-67; column 6 lines 1-5); 
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c. repeat means for activating the delay randomizer means to generate randomized delays 
for other domain-crossing signals identified by the identifying means (column 3 lines 1- 
15) 

d. wherein some domain-crossing signals have the second delay selected as the randomized 
delay while other domain-crossing signals have the first delay selected as the randomized 
delay (column 4 lines 25-42) 

e. simulating means for simulating a design containing the domain-crossing signals having 
the randomized delays (column 4 lines 25-42) for first flip-flops in synchronizers on the 
domain-crossing signals before sampling by the second clock (column 5 lines 25-43), 
whereby the design is simulated with randomized delays on domain-crossing signals 
wherein the randomized de-lays differ by the period of the second clock (column 3 lines 
1-15) 



Regarding claim 20: 

Smith is directed to the domain-crossing signal verifier of claim 19 further comprising multi- 
cycle means, receiving a list of multi-cycle signals that are allowed more than one period of the second 
clock for signal propagation, for activating the delay randomizer means to generate randomized delays for 
a gate in a path of each of the multi-cycle signals on the list of multi-cycle signals; 
wherein the randomized delays are applied to multi-cycle signals for simulation by the simulating means 
(column 3 lines 1-15; column 4 lines 25-42; column 5 lines 25-43). 
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AUTOMATIC VERIFICATION 



Automatic Verification of 
Asynchronous Circuits 



Sumii Wl WOULD UKI to 

design a transition arbiter, as sug- 
gested by Sproull et al. 1 The arbiter 
would have two clients, each com- 
municating with the arbiter using 
three signals: R (request), G 
(grant), and D (done). Transition 
signaling should be employed. For 
example, if a client wanted to re- 
quest the privilege and its request 
signal were currently low (high), 
the client would toggle the request 
signal to high (low). Each client 
could reside In one of the four 
states shown in Table 1. A correct 
implementation will guarantee 
that both clients cannot be in the 
privileged state at the same time. 

Assume now that we have de- 
signed the circuit shown in Figure 
1 . Would this circuit behave as re- 
quired? Traditionally, we would 
use simulation to verify the design. 
However J he- unknown component deL-L 
lay values make this difficult. One solu- / 
tion is to assign random delay values to / 
the components as they become un- 
stable. With extensive simulation, we i 
might hope to obtain some confidence / 

;jesi gn. \ 
Unfortunately, some errors ma 
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Verifying asynchronous designs is 
difficult, since design errors may 
manifest themselves only under rare 
circumstances. This article describes 
how to model asynchronous designs 
as programs in Synchronized 
Transitions, a general -purpose 
hardware description language. The 
authors show how this 
representation facilitates rigorous, 
efficient verification. 



cur only under some particular delay 
distribution, making the chance of ac- 
tually simulating this combination ex- 
tremely small. The techniques this 
article describes, however, make it easy 
to show that the circuit in Figure 1 is not 
correct. Furthermore, the tool we de- 
scribe provides the shortest sequence 
of transitions that lead to a state in 



which both clients will be in their 
privileged state. This information 
reduces the time and effort spent 
to find a correct design. 

Synchronized transitions 

Programs written in Synchron- 
ized Transitions describe both the 
computation and structure of digi- 
tal circuits. Designers have used 
Synchronized Transitions for VLSI 
designs such as a vector-matrix 
multiplier 2 and a high-speed com- 
munications chip. 3 By using simple 
primitives based on concurrent 
programming, Synchronized Trans- 
itions works well for synchronous, 4 
self-timed, and hybrid 3 designs. In 
this article, we emphasize the use 
of Synchronized Transitions for the 
design and verification of self- 
timed circuits. See Strunstrup 5 for 
a more complete description of Syn- 
chronized Transitions. 

In a Synchronized Transitions pro- 
gram, state variables correspond to 
signals, while transitions model latches 
and combinational logic. Transitions 
specify state changes using multi- 
assignments. For example, the «a=b-» 
c:=a» transition specifies an update of 
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Simulation Bas d Verification of Register-Transfer Level 

Behavioral Synth sisT Is 
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Abstract 

We present a simulation based system for verification of 
register-transfer level behavioral synthesis tools. Applica- 
tions are tool debugging and automatic regression test. 
Key feature is a transformation of sequential circuits for ap- 
plication of pseudo-random test patterns. The results show 
a high relevance of verification with pseudo-random pat- 
terns. 

introduction 

Part of the CAD-work in the Bell Laboratories is the devel- 
opment of register-transfer level behavioral synthesis tools. 
Reliable correctness of the software Is crucial as more and 
more designers use behavioral circuit descriptions as de- 
sign entry level. We were looking for a tool for debugging 
and regression test of synthesis systems. The tool to be ver- 
ified was BESTMAP (11 . BESTMAP accepts a register- 
transfer level description of a circuit in a subset of the lan- 
guage "C" as input and creates a gate structure as output 
which Is implemented with standard cells. 

The first step is to check, whether formal automatic verifica- 
tion is feasible. Automatic formal verification of gate level 
circuit descriptions became popular with the advent of effi- 
cient algorithms for symbolic manipulation of binary deci- 
sion diagrams^ (improvement through efficient variable 

ordering see* 3J J4J ). Those algorithms are only effective, if 
the functions are not "black boxes", but can be broken up 
into small subfunctions, which are individually analyzed 
before the results are composed. 

Unfortunately, the behavioral model is such a "black box". 
A possible way would be to map the behavioral description 
to a gate level reference structure and then to verify the 

equivalence of synthesized and reference structure. In 
such an approach Is used to verify the equivalence of 
"hardware flowcharts" and gate level descriptions. In our 
case, however, the mapping from behavior to circuit struc- 
ture Itself is a major task of the synthesis system including 
C-model parsing, word length calculation, don't care con- 
dition detection and multiple assignment resolution. Similar 
mapping algorithms would be used for verification and syn- 



* The work was done while the author was with ATAT Bell Laborato- 
ries in Allentown, PA 18103 
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thesis, and, consequently, we cannot expect that the verifi- 
cation software is significantly more reliable than the syn- 
thesis tool. 

Other verification approaches use symbolic manipulation 
for a direct comparison of hardware descriptions at differ- 
ent levels of abstraction, in some cases supported by ex- 
haustive simulation ("hybrid simulation", see 161 ; this paper 
also contains a brief overview of verification systems). Sim- 
ilar to the first approach, it would be necessary to partition 
the behavioral description in subfunctions requiring a C- 
model analysis which leads to comparable problems as 
mentioned above. 

It seems that at the current state, there Is no practical way 
of automatic formal verification. We decided, therefore, to 
choose a simulation approach using a standard In-house 
mixed level simulator. 

We present the simulation based verification system TSG 
(Test System Generator), which has been developed for 
the verification of register-transfer level synthesis tools. 
The system provides an automatic functional comparison 
of the input description and the output structure. 

In the next section, we will take a short look at the synthe- 
sis system BESTMAP. Then, the verification system TSG Is 
presented. The system applies random stimuli patterns for 
verification. In a further section, we will see how both be- 
havioral description and synthesized structure are trans- 
formed to improve the effectiveness of random patterns. Fi- 
nally, experiences using TSG in tool development are sum- 
marized. 

The Synthesis System BESTMAP 

As input, BESTMAP takes a register-transfer level behav- 
ioral circuit descriptions In a subset of the programming lan- 
guage "C". Without modification, the circuit description can 
be used as circuit model for our in-house simulation tools 

mm 

♦ 

There are currently two major limitations for the C-descrip- 
lion: 

• all states (registers) in the model must be controlled by 
the same clock. The states may be loaded asynchro- 
nously. 



